CVE-2015-3149

CWE-59CWE-3777 documents6 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 79.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Redhat Enterprise Linux DesktopRedhat Enterprise Linux HPC NodeRedhat Enterprise Linux HPC Node EUS+4 more
Timeline
PublishedJul 25
Latest updateMay 17

Description

The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

Also affects: Enterprise Linux 6.6, 6.6z, 7.1

🔴Vulnerability Details

2
GHSA
GHSA-v5hg-rhm9-pjph: The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack↗2022-05-17
▶
CVEList
CVE-2015-3149: The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack↗2017-07-25
▶

📋Vendor Advisories

2
Debian
CVE-2015-3149: openjdk-8 - The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and ...↗2015
▶
Red Hat
OpenJDK8: insecure hsperfdata temporary file handling, CVE-2015-0383 regression (Hotspot)↗2014-04-20
▶

💬Community

2
Bugzilla
CVE-2015-3149 java-1.8.0-openjdk: OpenJDK8: insecure hsperfdata temporary file handling, CVE-2015-0383 regression (Hotspot) [fedora-all]↗2015-04-20
▶
Bugzilla
CVE-2015-3149 OpenJDK8: insecure hsperfdata temporary file handling, CVE-2015-0383 regression (Hotspot)↗2015-04-20
▶
CVE-2015-3149 (MEDIUM CVSS 5.5) | The Hotspot component in OpenJDK8 a | cvebase.io